Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended privileges. We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-15 | 1 | Patch1 |
| 2026-07-01 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos QNAP ❗ CVE-2026-44083 ❗ CVE-2026-26237 ❗ CVE-2026-26236 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-qnap-5/ https://t.co/nngHyIoVl4
Post summary
The post enumerates three CVE identifiers for QNAP products and links to an external site for further details, with no additional technical or exploit information provided.
🖼️ QNAP QuMagie has an auth bypass (CVE-2026-44083) letting remote attackers gain unintended privileges — no credentials needed. Update to QuMagie 2.9.1 or later now. #QNAP #cybersecurity https://secalerts.co/vulnerability/CVE-2026-44083 https://t.co/HSselCeNQh
Post summary
QNAP QuMagie suffers an authentication bypass (CVE-2026-44083) that lets remote attackers elevate privileges without credentials; users are advised to update to version 2.9.1 or later to remediate the issue.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | qnap | qumagie | - | - | - |